Riskcovery

CVE-2025-35451

Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled

State
Published
Severity
9.3 Critical
Published
Sep 5, 2025
Updated
Sep 8, 2025
Reserved
Apr 15, 2025

Read the record on cve.org

Description

PTZOptics and possibly other ValueHD-based pan-tilt-zoom cameras use hard-coded, default administrative credentials. The passwords can readily be cracked. Many cameras have SSH or telnet listening on all interfaces. The passwords cannot be changed by the user, nor can the SSH or telnet service be disabled by the user.

Scores

CVSSScoreVectorSource
4.09.3 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:Ncisa-cg
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:Hcisa-cg

Weaknesses

  • CWE-798 Use of Hard-coded Credentials

Affected Products

ProductVersions
PT12X-SE-xx-G3PTZOptics
  • before 9.1.43Affected
  • 9.1.43Not affected
PT12X-LINK-4K-xxPTZOptics
  • before 0.0.63Affected
  • 0.0.63Not affected
PT20X-SE-xx-G3PTZOptics
  • before 9.1.32Affected
  • 9.1.32Not affected
PT20X-LINK-4K-xxPTZOptics
  • before 0.0.89Affected
  • 0.0.89Not affected
PT-STUDIOPROPTZOptics
  • before 9.0.41Affected
  • 9.0.41Not affected
PT30X-SE-xx-G3PTZOptics
  • before 9.1.33Affected
  • 9.1.33Not affected
PT30X-LINK-4K-xxPTZOptics
  • before 2.0.71Affected
  • 2.0.71Not affected
PT12X-STUDIO-4K-xx-G3PTZOptics
  • before 8.1.90Affected
  • 8.1.90Not affected
PT20X-STUDIO-4K-xx-G3PTZOptics
  • before 8.1.90Affected
  • 8.1.90Not affected
PT12X-SDI/NDI-xxPTZOptics
  • before 6.3.70Affected
  • 6.3.70Not affected
PT12X-USB-xxPTZOptics
  • before 6.2.88Affected
  • 6.2.88Not affected
PT20X-SDI/NDI-xxPTZOptics
  • before 6.3.27Affected
  • 6.3.27Not affected
Pan-Tilt-Zoom CamerasSMTAV
  • *Affected
PT30X-SDI/NDI-xxPTZOptics
  • before 6.3.43Affected
  • 6.3.43Not affected
Pan-Tilt-Zoom CamerasmultiCAM Systems
  • *Affected
VL Fixed Camera/NDI Fixed CameraPTZOptics
  • before 7.2.94Affected
  • 7.2.94Not affected
12x Fixed Camera/NDI Fixed CameraPTZOptics
  • before 7.2.85Affected
  • 7.2.85Not affected
20x Fixed Camera/NDI Fixed CameraPTZOptics
  • before 7.2.94Affected
  • 7.2.94Not affected
EPTZ Fixed Camera/NDI Fixed CameraPTZOptics
  • before 8.1.89Affected
  • 8.1.89Not affected
HC-EPTZ-NDIPTZOptics
  • before 8.2.14Affected
  • 8.2.14Not affected
PT12X-4K-xx-G3PTZOptics
  • before 0.0.58Affected
  • 0.0.58Not affected
PT20X-4K-xx-G3PTZOptics
  • before 0.0.85Affected
  • 0.0.85Not affected
PT20X-USB-xxPTZOptics
  • before 6.2.81Affected
  • 6.2.81Not affected
PT30X-4K-xx-G3PTZOptics
  • before 2.0.64Affected
  • 2.0.64Not affected
Pan-Tilt-Zoom CamerasValueHD
  • *Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.